Fedora 13 : sudo-1.7.2p6-2.fc13 (2010-9402)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 12 : sudo-1.7.2p6-2.fc12 (2010-9415)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for sudo FEDORA-2010-9417

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for sudo FEDORA-2010-9415

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2062-1 : sudo - missing input sanitization

Anders Kaseorg and Evan Broder discovered a vulnerability in sudo, a program designed to allow a sysadmin to give limited root privileges to users, that allows a user with sudo permissions on certain programs to use those programs with an untrusted value of PATH. This could possibly lead to certa...

[ MDVSA-2010:118 ] sudo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:118 http://www.mandriva.com/security/ Package : sudo Date : June 17, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discover...

Fedora Update for sudo FEDORA-2010-9402

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for sudo MDVSA-2010:118 (sudo)

Check for the Version of sudo OpenVAS Vulnerability Test Mandriva Update for sudo MDVSA-2010:118 sudo Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-2062-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 17, 2010 http://www.debian.org/security/faq -...

RHEL 5 : sudo (RHSA-2010:0475)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2010:0475 advisory. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the way sud...

CVE-2010-1646

CVE-2010-1646 affects the sudo secure_path behavior when an environment contains multiple PATH variables, allowing local privilege escalation. Impact, as described in connected advisories, covers multiple sudo versions: 1.3.1–1.6.9p22 and 1.7.0–1.7.2p6. The root cause is insufficient sanitization...

CVE-2010-1646

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable...

FreeBSD Ports: sudo

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8

June 1, 2010 Dmitry V. Levin 1:1.6.8p12-alt8 - Backported upstream fix for CVE-2010-1163 envreset, ignoredot and securepath sudoers options all had to be explicitly disabled to make an attack possible. - Backported upstream fix for CVE-2010-1646 envreset sudoers option had to be explicitly disabl...

Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8

June 1, 2010 Dmitry V. Levin 1:1.6.8p12-alt8 - Backported upstream fix for CVE-2010-1163 envreset, ignoredot and securepath sudoers options all had to be explicitly disabled to make an attack possible. - Backported upstream fix for CVE-2010-1646 envreset sudoers option had to be explicitly disabl...

CentOS Security Advisory CESA-2009:1646 (libtool)

The remote host is missing updates to libtool announced in advisory CESA-2009:1646. CESA-2009:1646 66528 6 $Id: ovcesa20091646.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1646 libtool Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1646 (libtool)

The remote host is missing updates to libtool announced in advisory CESA-2009:1646. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2009-1646

CVE-2009-1646 describes a stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 that can be triggered by a long RTSP URL in a .ram file, allowing remote attackers to execute arbitrary code. The vulnerability is labeled with a high impact (CVSS 2.0 base score 9.3) involving remote code ...

CVE-2009-1646

creationtimestamp| type| source ---|---|--- 2009-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8628...

Debian Security Advisory DSA 1646-2 (squid)

The remote host is missing an update to squid announced via advisory DSA 1646-2. OpenVAS Vulnerability Test $Id: deb16462.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1646-2 squid Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...